Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
File:                     hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft (raw, json)
Hash identifier:          93CkiTRSSCBJDsVFA3bNjzAIPCwLCoKQBdFJHa9DKkw=
Subject key identifier:   71:51:6A:C0:72:2D:16:63:4D:FA:5F:15:5C:9A:D4:1D:6B:87:55:5A
Authority key identifier: 85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB
Certificate issuer:       /CN=A91958BE/serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
Certificate serial:       025E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
Manifest number:          0254
Signing time:             Wed 13 May 2026 02:21:49 +0000
Manifest this update:     Wed 13 May 2026 02:21:48 +0000
Manifest next update:     Wed 20 May 2026 02:21:48 +0000
Files and hashes:         1: hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl (hash: RytW/LoI+35zJfHRNWxMvcn5a9xol6pJCO+bfBCh/bw=)
                          2: 54FB2C8CD61711EEB983D919C4F9AE02.roa (hash: kdVR/T3ew7TyPnhxkEWRlQM3zCM8IzXis0xGyLY9c78=)
                          3: 5576D030D61711EEB983D919C4F9AE02.roa (hash: 05QuhzxS6Rv7IEmh1jeaGvvIDM5pA0OXeqbGhZ+/gWM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl
                          rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:21:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 606 (0x25e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91958BE, serialNumber=854FE7275360D07810AFFBA6C28FFF23582A20EB
        Validity
            Not Before: May 13 02:21:48 2026 GMT
            Not After : May 20 02:21:48 2026 GMT
        Subject: CN=6a03e03d-f407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d1:2c:18:b2:d1:b5:5a:3d:00:49:8c:b5:ee:
                    06:ea:ed:88:88:d0:cd:19:7a:5c:09:f9:90:fb:7c:
                    13:20:cf:3f:e9:d7:9e:5b:63:95:d4:0e:e2:45:b7:
                    51:4f:6d:34:6c:a0:c4:8f:b0:de:5b:2c:96:35:cf:
                    72:15:c6:05:1a:69:4a:46:e5:cb:c5:15:de:eb:fa:
                    2e:95:70:40:e0:d8:de:f9:9d:c5:1a:a6:e0:6c:22:
                    24:eb:e2:06:7a:1e:5c:92:c7:ef:0c:dd:27:76:fe:
                    84:cd:4c:ab:c7:da:6a:31:8f:ba:69:5a:bc:e8:e8:
                    60:e0:0f:f2:0e:4b:9c:84:5b:32:08:d3:d9:56:19:
                    04:fe:4c:12:2f:78:31:13:b8:1b:55:9e:64:1f:40:
                    f5:3d:78:f6:12:aa:6c:23:3c:2d:e7:d5:59:4e:00:
                    a4:e3:3c:88:b7:d0:4f:59:6f:ed:81:5f:3f:a3:0a:
                    98:c5:cb:64:26:83:e3:0d:c8:6c:50:35:d1:ec:cd:
                    a1:d2:f7:27:7c:39:05:01:77:94:d6:cd:ad:a8:bb:
                    12:ab:31:ad:83:f6:a0:7b:ac:f0:3e:b8:a7:eb:06:
                    ed:c4:87:20:3f:e9:0a:8b:61:f0:58:9c:de:92:c6:
                    60:c3:21:ed:1c:70:ef:15:a8:13:73:a0:26:4c:67:
                    18:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:51:6A:C0:72:2D:16:63:4D:FA:5F:15:5C:9A:D4:1D:6B:87:55:5A
            X509v3 Authority Key Identifier:
                keyid:85:4F:E7:27:53:60:D0:78:10:AF:FB:A6:C2:8F:FF:23:58:2A:20:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hU_nJ1Ng0HgQr_umwo__I1gqIOs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91958BE/7C7FB2FEC21911ED80256F4EC4F9AE02/hU_nJ1Ng0HgQr_umwo__I1gqIOs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:f9:2a:7a:69:db:76:41:0b:b6:bf:6c:20:45:a6:60:9e:22:
         39:fe:98:84:a8:16:d6:7a:fd:c9:ad:f1:d1:97:91:3a:88:b7:
         f1:37:1f:61:6e:75:45:6a:f7:79:11:d3:62:7c:05:30:68:e2:
         e8:a3:85:8b:0c:21:10:9f:5a:48:56:ce:36:c7:55:a4:96:50:
         18:ba:af:44:11:24:f4:97:a0:ac:0b:9a:66:45:dd:f8:aa:d5:
         48:17:00:58:d9:bd:8f:a1:c5:c8:c0:79:7c:be:24:82:cf:77:
         4f:12:40:48:46:f0:3f:fb:db:e4:c7:52:10:6d:dc:c2:18:d7:
         29:35:cd:31:f2:91:17:67:ae:bb:a0:95:51:2a:04:47:96:11:
         22:28:37:a1:78:aa:9c:7d:08:1b:fb:a3:58:e3:dc:48:dd:92:
         28:69:9b:64:09:19:6e:ed:17:96:a2:62:e1:2d:27:8a:ee:28:
         23:84:6f:8a:5b:4a:de:ef:f3:3f:34:fc:1a:d4:19:54:d6:90:
         c4:f3:51:b0:ba:a9:7d:c1:69:82:f6:dc:5b:59:7c:cd:15:4a:
         f0:3e:4e:55:14:e9:43:c2:95:f6:bc:15:9e:dc:77:51:e6:b2:
         72:04:3a:47:aa:04:cb:32:98:1b:55:fc:5c:86:b3:85:cd:07:
         65:7a:4c:6a
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAl4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OTU4QkUxMTAvBgNVBAUTKDg1NEZFNzI3NTM2MEQwNzgxMEFGRkJBNkMyOEZGRjIz
NTgyQTIwRUIwHhcNMjYwNTEzMDIyMTQ4WhcNMjYwNTIwMDIyMTQ4WjAYMRYwFAYD
VQQDEw02YTAzZTAzZC1mNDA3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAzdEsGLLRtVo9AEmMte4G6u2IiNDNGXpcCfmQ+3wTIM8/6deeW2OV1A7iRbdR
T200bKDEj7DeWyyWNc9yFcYFGmlKRuXLxRXe6/oulXBA4Nje+Z3FGqbgbCIk6+IG
eh5cksfvDN0ndv6EzUyrx9pqMY+6aVq86Ohg4A/yDkuchFsyCNPZVhkE/kwSL3gx
E7gbVZ5kH0D1PXj2EqpsIzwt59VZTgCk4zyIt9BPWW/tgV8/owqYxctkJoPjDchs
UDXR7M2h0vcnfDkFAXeU1s2tqLsSqzGtg/age6zwPrin6wbtxIcgP+kKi2HwWJze
ksZgwyHtHHDvFagTc6AmTGcYEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHFRasBy
LRZjTfpfFVya1B1rh1VaMB8GA1UdIwQYMBaAFIVP5ydTYNB4EK/7psKP/yNYKiDr
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NThCRS83QzdGQjJGRUMy
MTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBIZ1FyX3Vtd29fX0kxZ3FJ
T3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2hVX25KMU5nMEhnUXJfdW13b19fSTFncUlPcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
NThCRS83QzdGQjJGRUMyMTkxMUVEODAyNTZGNEVDNEY5QUUwMi9oVV9uSjFOZzBI
Z1FyX3Vtd29fX0kxZ3FJT3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU/kqemnbdkELtr9sIEWmYJ4iOf6YhKgW1nr9ya3x0ZeROoi38TcfYW51RWr3
eRHTYnwFMGji6KOFiwwhEJ9aSFbONsdVpJZQGLqvRBEk9JegrAuaZkXd+KrVSBcA
WNm9j6HFyMB5fL4kgs93TxJASEbwP/vb5MdSEG3cwhjXKTXNMfKRF2euu6CVUSoE
R5YRIig3oXiqnH0IG/ujWOPcSN2SKGmbZAkZbu0XlqJi4S0niu4oI4RviltK3u/z
PzT8GtQZVNaQxPNRsLqpfcFpgvbcW1l8zRVK8D5OVRTpQ8KV9rwVntx3UeaycgQ6
R6oEyzKYG1X8XIazhc0HZXpMag==
-----END CERTIFICATE-----
Generated at Wed May 13 08:57:18 2026 by rpki-client